Re: i Don't get why it makes trouble

2009-08-13 Thread Scott David Daniels
azrael wrote: ... A lot of people a not aware of SQL injection. My friend from college asked me and a couple of other guys for Pen testing of an website. His SQL injection mistake made him an epic fail. And some people are unaware of the unofficial official Python citation for SQL injection exp

Re: i Don't get why it makes trouble

2009-08-13 Thread Stephen Hansen
> > Currently I am working on just a prototype to show what is possible to > be done to get me some fundings for my future work. after that I will > get over to an SQL Alchemy. It's ORM will take over this business for > me. > > A lot of people a not aware of SQL injection. My friend from college >

Re: i Don't get why it makes trouble

2009-08-13 Thread Terry Reedy
azrael wrote: Thanks Worked fine for me. I was a freakin idiot. I forgot about using a tuple. damn lists :D The special casing of tuples versus other sequence objects with % formatting, and the forgetting and mistake making of multiple people is one of the reasons for the new .format system.

Re: i Don't get why it makes trouble

2009-08-13 Thread azrael
On 14 kol, 00:14, Philip Semanchuk wrote: > On Aug 13, 2009, at 6:00 PM, azrael wrote: > > > > > > > On 13 kol, 22:09, Philip Semanchuk wrote: > >> On Aug 13, 2009, at 2:56 PM, azrael wrote: > > >> j > >>> [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] > >> len(j) > >>>

Re: i Don't get why it makes trouble

2009-08-13 Thread Philip Semanchuk
On Aug 13, 2009, at 6:00 PM, azrael wrote: On 13 kol, 22:09, Philip Semanchuk wrote: On Aug 13, 2009, at 2:56 PM, azrael wrote: j [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] len(j) 5 h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, d.id_drzava, v.id_v

Re: i Don't get why it makes trouble

2009-08-13 Thread azrael
On 13 kol, 22:09, Philip Semanchuk wrote: > On Aug 13, 2009, at 2:56 PM, azrael wrote: > > j > > [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] > len(j) > > 5 > h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija,   > d.id_drzava, v.id_valuta FROM  

Re: i Don't get why it makes trouble

2009-08-13 Thread Benjamin Kaplan
On Thu, Aug 13, 2009 at 4:09 PM, Philip Semanchuk wrote: > > On Aug 13, 2009, at 2:56 PM, azrael wrote: > > j > [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] >> >>> len(j) > 5 >> >>> h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, > d.id_dr

Re: i Don't get why it makes trouble

2009-08-13 Thread Philip Semanchuk
On Aug 13, 2009, at 2:56 PM, azrael wrote: j [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] len(j) 5 h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, d.id_drzava, v.id_valuta FROM ulica as u, opcina as o, zupanija as z, drzava as d, valuta as v WHERE

Re: i Don't get why it makes trouble

2009-08-13 Thread azrael
On 13 kol, 21:12, "Jan Kaliszewski" wrote: > Me wrote: > > 13-08-2009 azrael wrote: > > > j > >> [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] > > len(j) > >> 5 > > h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija,   > > d.id_drzava, v.id_valuta FR

Re: i Don't get why it makes trouble

2009-08-13 Thread Jan Kaliszewski
Me wrote: 13-08-2009 azrael wrote: j [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] len(j) 5 h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, d.id_drzava, v.id_valuta FROM ulica as u, opcina as o, zupanija as z, drzava as d, valuta as v WHERE u.nazi

Re: i Don't get why it makes trouble

2009-08-13 Thread Jan Kaliszewski
13-08-2009 azrael wrote: j [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] len(j) 5 h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, d.id_drzava, v.id_valuta FROM ulica as u, opcina as o, zupanija as z, drzava as d, valuta as v WHERE u.naziv = '%s' AND

i Don't get why it makes trouble

2009-08-13 Thread azrael
>>> j [u'Tata', u'Oriovac', u'PrimorskoGoranska', u'hrvatska', u'Kuna'] >>> len(j) 5 >>> h = """SELECT distinct u.id_ulica, o.id_opcina, z.id_zupanija, d.id_drzava, >>> v.id_valuta FROM ulica as u, opcina as o, zupanija as z, drzava as d, >>> valuta as v WHERE u.naziv = '%s' AND o.naziv = '%s